
INDIANA DATA BREACH NOTIFICATION FORM 

OAG Form 1079 (R0 / 09-13) 

Identity Theft Unit 


OFFICE OF ATTORNEY GENERAL 
Consumer Protection Division 
Government Center South, 5 lh floor 
302 W. Washington Street 
Indianapolis, IN 46204 
(317) 233-4393-Fax 


Name and Address of Entity or Person that owns or licenses the data subject to the breach 


H. Carson Smith, IV, P.C. 
Street Address 
4474 Commerce Dr. 


Submitted by 
James J. Giszczak 


Firm Name (if different than entity) 
McDonald Hopkins PLC 


Email 

Jgiszczak@mcdonaldhopkins.com 


City 

Buford 


Member 


Zip Code 
30518 


Telephone 

2482201354 


Relationship to Entity whose Information was compromised 
Attorney 


Type of Organization (please select one) 

.- - . -. 


^71 

□ State of Indiana Government Agency 

1 1 Health Care 

1 1 Not-For-Profit 


[3 Other Government Entity 

1 1 Financial Services 

3 Other - please specify 


I I Educational 

1 1 Other Commercial 

Law Firm 




Number of Persons Affected 



Dale Breach Occurred ( include start/end dates if known) October 2, 2018 
Date Breach Discovered March 6, 2019 


Date Consumers Notified 


Reason for delay, if any, in sending notification 






Description of Breach (select all that apply ) 


. ' vv- - f ' ; -f: .-V s •' 

■ . - - 

. 

■ 

1 i Inadvertent disclosure 

3 

External system breach (e.g. hacking) 


1 1 Insider wrong-doing 

□ 

Other 


n Loss or theft of device or media (e.g. computer, laptop, external 
hard drive, thumb drive, CD, tape) 






Information Acquired ( select all that apply) 


EZI Social Security Number 13 Name In combination with (select all that apply) 

@1 Driver's License Number Q State Identification Number □ State Identification Number 
□ Debit Card Number (in combination with security code, access code, password or PIN for account) 


| List dates of previous breach notifications (within last 12 months) 


N/A. 
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Manner of Notification to Affected Persons 


Attach a copy of a sample notification letter 

171 Written 
Pi Electronic (email) 

I I Telephone 


Identity Theft Protection Service Offered 


Duration 1 year 


Provider TransUnion 


B Yes 
D No 
Brtef Description of Service: 

Credit monitoring and identity theft protection 


Since this breach, we have taken the following steps to ensure It does not reoccur (attach additional pages if necessary) 


At H. Carson Smith, IV, P.C, protecting the privacy of personal information is a top priority. H, Carson Smith, IV, P.C. is committed to 
maintaining the privacy of personal information in its possession and has taken many precautions to safeguard it. IT. Carson Smith, 
iV, P.C. continually evaluates and modifies its practices and internal controls to enhance the security and privacy of personal 
information. As a result of this incident, H. Carson Smith, iV, P.C. has changed the password for the compromised account and is 
implementing a written information security program. 


Any other Information that my bo relevant to the Office of Attorney General In reviewing this incident ( attach additional pages if necessary) 


SUBMIT 








